dovecot-devel vulnerabilities (AlmaLinux)
20 vulnerabilities.
-
dovecot-develAlmaLinux An attacker that holds a token intended for a different purpose can authenticate, because when an... 7.4 High -
dovecot-develAlmaLinux An unauthenticated attacker can send an IMAP ID command with a very large number of parameters... 7.5 High -
dovecot-develAlmaLinux An attacker that has valid credentials can use a Sieve script with the editheader extension to... 9.1 Critical -
dovecot-develAlmaLinux An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process... 5.9 Medium -
dovecot-develAlmaLinux None None None No publicly available exploits are known. 7.4 High -
dovecot-develAlmaLinux An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed... 7.5 High -
dovecot-develAlmaLinux When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with... 4.3 Medium -
dovecot-develAlmaLinux An attacker that can send mail to a user can craft a message whose headers contain a very large... 7.5 High -
dovecot-develAlmaLinux An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE... 4.3 Medium -
dovecot-develAlmaLinux Attacker can send a specifically crafted message before authentication that causes managesieve to... 7.5 High -
dovecot-develAlmaLinux Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory... 4.3 Medium -
dovecot-develAlmaLinux ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be... 7.5 High -
dovecot-develAlmaLinux Very large headers can cause resource exhaustion when parsing message. The message-parser... 7.5 High -
dovecot-develAlmaLinux Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU... 5.0 Medium -
dovecot-develAlmaLinux An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two... 8.8 High -
dovecot-develAlmaLinux The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp.... 4.8 Medium -
dovecot-develAlmaLinux Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an... 7.5 High -
dovecot-develAlmaLinux An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker... 6.8 Medium -
dovecot-develAlmaLinux In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission... 5.3 Medium -
dovecot-develAlmaLinux In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after... 5.3 Medium